DATA PROTECTION POLICY
Data Protection Policy of Land of Ride
Land of Ride BV, takes data protection issues very seriously and collects, processes, and uses your personal data exclusively in accordance with the principles described below, taking into account the applicable data protection laws.
Collection and storage of personal data/data categories
The term "personal data" refers to all information relating to an identified or identifiable natural person. This includes, for example, your name, telephone number, postal address and e-mail address.
Personal data, as defined in the applicable data protection provisions, also include information concerning your use of the Website, which are collected, processed, stored and used by our Web servers to enable the provision and optimisation of our Website and ensure system security and for statistical purposes (the "User Data"). These include, inter alia, the connection data of the requesting computer (IP address), the pages that you visit on our Website, the date and length of your visit, the identification data of the type of browser and operating system used, the website from which you visit us and the length of time until the order is placed.
Apart from the User Data described in para. (2) above, we will only collect personal data if you voluntarily share them with us. When you place an order, the following additional data is collected: payment information, such as your bank details or credit card number, as well as data concerning the products ordered/the contents of your shopping cart (“Order Data”).
If you subscribe to our Newsletter, we will collect and process the following personal data: title, name, e-mail address.
The personal data collected from you (Registration Data, Order Data and User Data) are stored lawfully and as specified by the applicable data protection provisions. Your data will, of course, be treated confidentially.
Purposes of data processing and legal bases
Your Registration Data and Order Data will be used to perform the agreements concluded between you and us, particularly for delivering ordered products to the address provided by you. The legal basis for this processing is the performance of the agreement, respectively conducting precontractual activities. The provision of these personal data is a contractual requirement. If you do not provide these personal data, you cannot set up a customer account or order any products, as applicable.
If we have received your e-mail address in connection with the purchase of a product or service, we will use your e-mail address for advertising similar products or services of our own. You can opt-out of this use of your e-mail address for these purposes at any time without incurring any cost other than the applicable transmission costs at the basic rates. The legal basis for this processing is our legitimate interest in processing personal data for direct advertising.
If you register for the Land of Ride newsletter or The Ride Club Newsletter and have consented to receive newsletters and advertising e-mails, we will use your e-mail address for internal advertising purposes. You can opt-out of delivery of the newsletter and the use of your e-mail address for advertising purposes with prospective effect at any time by clicking on the link included in the newsletter.
We will also notify you separately of this right to opt-out in the e-mail that accompanies our newsletter and in all other promotional e-mails. The legal basis for the processing of your personal data is your consent.
Your payment data are protected in the course of transmission to our servers by using SSL security procedures (Secure Socket Layer) in connection with 256-bit encryption. You can check the security of the connection using the information in your browser's URL display. If the start of the address line changes from "http" to "https", the connection is secure.
Furthermore, all service providers used for purposes of processing payments are PCI-DSS certified (Payment Card Industry Data Security Standard). By complying with the PCI Data Security Standards, they fulfil the most stringent requirements of e-Commerce industry standards. More information about this is available, for instance, www.pcisecuritystandards.org
If you have granted your consent for certain data processing operations, you can revoke your consent prospectively at any time. This type of revocation does not affect the lawfulness of the processing performed based on the consent until the time of revocation.
Under the applicable data protection provisions, you have, where applicable, the right to (i) information (ii) correction, (iii) deletion, restriction on processing, (iv) data portability and/or (vii) opt out of the processing. The aforementioned rights may be restricted under national data protection provisions. Specifically:
(i) Right to information: You have, where applicable, the right to require us to confirm whether personal data concerning you are being processed and, if so, you have the right to receive information about these personal data. The right to information includes, in particular, the purposes of the processing, the categories of personal data processed and the recipients or categories of recipients to whom the personal data are disclosed. Moreover, you have the right, where applicable, to receive a copy of the personal data processed. However, this right is not unlimited, as the rights of other persons may restrict your right to receive a copy. The right to information is restricted by Section 34 of the Federal Data Protection Act (FDPA).
(ii) Right to correction: You have, where applicable, the right to require that incorrect personal information concerning you be corrected. Taking into account the purposes of the processing, you have the right to require that incomplete personal data be completed, including by means of a supplementary declaration.
(iii) Right to deletion (“right to be forgotten”): Under certain conditions, you have the right to require us to delete personal data concerning you, and we are required to delete such personal data. The right to deletion is restricted by Section 35 FDPA.
(iv) Right to restriction of the processing: Under certain conditions, you have the right to require us to restrict the processing of your personal data. In this case, the relevant data will be marked and used by us only for certain purposes.
(v) Right to data portability: Under certain conditions, you have the right to receive, in a structured, conventional and machine-readable format, the personal data that you have provided to us concerning you, and you have the right to transmit these data to another controller without interference from us.
RIGHT TO OPT-OUT
Right to opt out pursuant to Art. 21 General Data Protection Regulation
You have the right to opt out, on grounds relating to his or her particular situation, at any time to the processing of personal data that concerning you which is based on Art. 6(1)(e) (data processing in the public interest) and (f) (data processing based on legitimate interests) General Data Protection Regulation. If you opt-out, we will no longer process your personal data unless we can demonstrate that we have compelling legitimate grounds for the processing which override your interests, rights, and freedoms or the processing serves the establishment, exercise or defense of legal claims.
Where personal data are processed for direct marketing purposes, you have the right to opt-out, at any time, of the processing of personal data concerning you for the purpose of such marketing. This also applies to profiling to the extent that it is related to such direct marketing.